Best practices of security (place of index.php)

[eluser]kezman[/eluser]
[quote author="gRoberts" date="1337093731"]Because how CI is written, it's "harder" to

Code:

/
/htdocs
/htdocs/index.php
/system
/application

and then use, as you have:

Code:

$system_folder = '../system';
$application_folder = '../application';

This prevents anyone from accessing the files via the browser, making it a little more secure.[/quote]

Where do you store .css, .js and image files?